METHOD OF PERFORMING A SIMON'S OR A SHOR'S QUANTUM 
ALGORITHM AND RELATIVE QUANTUM GATE 

Field of -the Invention 
[0001] The present invention relates in general to 
quantum algorithms, and in particular, to a method and 
a corresponding quantum gate for performing Simon's and 
Shor's algorithms without the need for storing very 
large matrices . 

Background of the Invention 
[0002] Quantum algorithms are global random 
searching algorithms based on the principles, laws and 
quantum effects of quantum mechanics. They are used for 
controlling a process or for processing data in a 
database. They are particularly useful in performing 
intelligent processes of search-of-minima intelligent 
operations . 

[0003] In quantum search operations, each design 

variable is represented by a finite linear 
superposition of classical initial states. Through a 
sequence of elementary unitary steps the initial 
quantum state | i> (for the input) is manipulated in 
such a way that a measurement of the final state of the 
system yields the correct output. Usually, in the 
quantum search algorithm three principal operators are 
used, namely: linear superposition (coherent states), 
entanglement, and interference. 

[0004] For a better understanding of the field of 
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application of the invention, a brief description of 
quantum search algorithms is provided. 

A SURVEY OF QUANTUM ALGORITHMS: 

[0005] The problems solved by quantum algorithms may 
be stated as follows: 



Input 


A function jf:{0,l} n -+{0,l} m 


Problem 


Find a certain property of f 



The structure of a quantum algorithm is outlined, in a 
high level representation, by the diagram of FIGURE 1. 
[0006] The input of a quantum algorithm is always a 



BOX 1: UNITARY MATRIX U F 

A squared matrix U F on the complex field is unitary 
if its inverse matrix coincides with its conjugate 
transpose: 

U F ~ l =U F f 

A unitary matrix is always reversible and preserves 
the norm of vectors. 



function f of a binary string into a binary string. 
This function is represented as a map table, defining 
for each string its image. The function f is first 
encoded into a unitary matrix operator U F depending on 
the f properties. This operator calculates f when its 
input and output strings are encoded into canonical 
base vectors of a complex Hilbert space: U F maps the 
vector code of every string into the vector code of its 



image by f. 

[0007] Once the matrix operator U F has been 
generated, it is embedded into a quantum gate G. The 
quantum gate G is a unitary matrix whose structure 
depends on the form of the matrix U F and on the problem 
to be solved. The quantum gate is the core of a quantum 
algorithm. In every quantum algorithm, the quantum gate 
acts on the initial canonical base of vectors (a same 
vector may always be chosen) to generate a complex 
linear combination (superposition) of base vectors as 
output. This superposition contains all the information 
to answer the initial problem. 

[0008] After having made such a superposition, a 
measurement is done to extract this information. In 
quantum mechanics, a measurement is a non-deterministic 
operation that produces as output only one of the base 
vectors of the operation of superposition. The 
probability of each base vector being the output of the 
measurement depends on its complex coefficient 

(probability amplitude) of entering in the complex 
linear combination . 

[0009] Each single operation of the quantum gate and 

the measurement form a quantum block. The quantum block 
is repeated k times to produce a collection of k base 
vectors. Since the measurement is a non-deterministic 
operation, these basic vectors will not necessarily be 
identical and each one of them encodes the information 
needed to solve the problem. The last part of the 
algorithm includes the interpretation of the collected 
base vectors to obtain with a certain probability the 
right answer to the initial problem. 



0} « 
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ENCODER: 

[00010] The behavior of the encoder block is 
described in the detailed schematic diagram of FIGURE 
2. Function f is encoded into matrix U F in three steps. 

STEP 1: 

[00011] The map table of function f : { 0, 1 } n ->{ 0, 1 } m is 
transformed into the map table of the injective 
function F: { 0, l} n ' hm —>{ 0,1 } n+m such that: 

F(X 0 , - - - , Xn-lr YOf - • • t Ym-\ ) ~ 
(X 0 , X n -i, f(X 0 , x n - 1 )®(y 0 , Ym-l) ) (1) 



BOX 2: XOR OPERATOR © 

The XOR operator between two binary strings p and g 
of length m is a string s of length in such that the 
i-th digit of s is calculated as the exclusive OR 
between the i-th digits of p and q: 

P= (P0f - - f Pn-l) 

<T= (<7o/ - - / qn-i) 
s = p © qr = ( (po+g 0 ) mod 2, (pn-i+g n -i) mod 2) 



The need to deal with an injective function comes from 
the requirement that U F be unitary. A unitary operator 
is reversible, so it cannot map two different inputs to 
the same output. Given that U F is the matrix 
representation of F, F must be injective. Should the 
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matrix representation of function f be used, a non- 
unitary matrix may result, since f could be non- 
injective. Therefore, injectivity is assured by 
increasing the number of bits and by considering the 
function F instead of the function f. Anyway, function 
f can always be calculated from F by putting (yo, . . . , 
y/n-i) = (0, ...,0) in the input string and reading the 
last m values of the output string. 

STEP 2: 

[00012] The map table of function F is transformed 
into map table U F , according to the following formula: 



The coding map r : { 0, 1 } n+m C 2 (c 2 is the target 

complex Hilbert space) is such that: 



Vse{0,l} 



U F [T(S)]= T [F(S) ] 



(2) 



K<>)= o=|0) r(l) = r =|1> 



(3) 



r(x 0 ,..,x n+m _ } ) = t(x 0 )® .. ® r{x n+m _ x ) = \x ( 




<J1 
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BOX 3: VECTOR TENSOR PRODUCT ® 
The tensor product between two vectors of dimensions h 
and k is a tensor product of dimension h-k, such that: 











x)®\y) = 

















Physical interpretation : 

Xf a component of a complex 
vector is interpreted as 
the probability amplitude 
of a system being in a 
given state (indexed by the 
component number) , the 
tensor product between two 
vectors describes the joint 
probability amplitude of 
two systems being in a 
joint state. 



Examples: Vector Tensor Products 
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Code r maps bit values into complex vectors of 
dimension 2 belonging to the canonical base of C 2 . 
Moreover, using tensor products, r maps the general 
state of a binary string of dimension n into a vector 
of dimension 2 n , and reducing this state to the joint 



state of the n bits forms the register. Every bit state 
is transformed into the corresponding 2-dimension base 
vector and then the string state is mapped into the 
corresponding 2 n -dimension base vector by composing all 
bit-vectors through tensor products. In this sense, a 
tensor product is the vector counterpart of state 
conjunction . 

[00013] Base vectors are denoted using the ket 
notation |i>. This notation is taken from Dirac's 
description of quantum mechanics. 

STEP 3: 

[00014] The map table of U F is transformed into the 
matrix U F by using the following transformation rule: 

[U F ] 0 =l<*U F \j)=\i) (4) 

which can be easily understood by considering the 
vectors | i> and |j> as column vectors. Because these 
vectors belong to the canonical base, U F defines a 
permutation map of the rows of the identity matrix. In 
general, row |j> is mapped into row I i>. This rule will 
be illustrated more in detail in a sample quantum 
algorithm, namely the Shor's algorithm. 

QUANTUM BLOCK: 

[00015] The core of the quantum block is the quantum 
gate, which depends on the properties of the matrix C/ F . 
The scheme of FIGURE 3 gives a more detailed 
description of the quantum block. In FIGURE 3, the 
matrix operator U F is the output of the encoder block 
represented in FIGURE 2. Here, it becomes the input for 
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the quantum block. 

[00016] This matrix operator is first embedded into a 
more complex gate: the quantum gate G. Unitary matrix G 
is applied k times to an initial canonical base vector 

I i> of dimension 2 n+m . Every time, the resulting complex 
superposition 6|0..01..1> of base vectors is measured, 
producing as a result one base vector |xi>. All the 
measured base vectors { | Xj>, . . , | x k > } are collected 
together. This collection is the output of the quantum 
block. 

[00017] The intelligence of such algorithms rests in 
the ability to build a quantum gate that is able to 
extract the information necessary to find the required 
property of f and to store it into the output vector 
collection. The structure of the quantum gate for every 
quantum algorithm will be discussed in detail, 
observing that a general description is possible. To 
represent quantum gates some special diagrams called 
quantum circuits will be used. 

[00018] An example of a quantum circuit, relative to 
the so called Deutsch- Jozsa' s quantum algorithm, is 
illustrated in FIGURE 4. Every rectangle is associated 
to a matrix 2 n x2 n , where n is the number of lines 
entering and leaving the rectangle. For example, the 
rectangle marked U F is associated to the matrix U F . 
Typically, matrix H represents a Hadamard rotation: 



1 1 
1 -1 



(5) 



Quantum circuits provide a high-level description of 
the gate, and by using some transformation rules that 



are listed in FIGURES 5a to 5f, it is possible to 
compile them into the corresponding gate-matrix. 



BOX 4: MATRIX 


TENSOR PRODUCT <8> 


The tensor product between two matrices X nxm and Y hxk 


is a (block) 


matrix (n-h) x {m-k) such 


that : 




x u Y .. x ]m Y 








X®Y = 




with X = 








_x nl Y . ... x nm Y 




x nl .. x nm _ 





Example: Matrix Tensor Product 



"1 2 




"5 6" 








3 4_ 




7 8_ 





1- 


"5 


6" 




"5 


6" 






"5 


6 


10 


12" 




7 


8 


2- 


7 


8 






7 


8 


14 


16 




3- 


5 


6 


4- 


5 


6 






15 


18 


20 


24 






7 


8 




7 


8 






21 


24 


28 


32_ 



[00019] The manner of using these rules will become 
clearer when a first sample of a quantum algorithm will 
be illustrated. 

DECODER: 

[00020] The decoder block has the function of 
interpreting the base vectors collected after the 
iterated execution of the quantum block. Decoding these 
vectors means to retranslate them back into binary 
strings and interpreting them directly if they already 
contain the answer to the starting problem. 
Alternatively, they may be used as coefficient vectors 
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for some system of equations to obtain the sought 
solution. This part will not be discussed in detail 
because it is relatively straightforward. 
[00021] To better illustrate a field of application 
of the invention, a brief description of the Shor's 
algorithm is given. 

SHOR'S ALGORITHM: 

[00022] Shor's problem is so stated: 

Given an integer number N, find a factor p for N. 

[00023] This problem seems to be different from the 
other problems solved by quantum algorithms , but it can 
be reduced to an equivalent problem with the same form 
as the other quantum problems. This reduction is made 
possible by a result of the theory of numbers that 
relates the period r of a special periodic function to 
the factors of an integer N. This function is: 

where a is a random number coprime to N, namely: 

gcd(a,N) = \ 

where gcd{x, y) is the greatest common divisor between 
x and y. 

[00024] This function is periodic (the period is at 
most N) . Let the period be r. Then: 



/a^(0) = /„>) a r =lmodN 



If the period is even, this equation can be rewritten 
as : 



(a r/2 f =lmodNo(a r/2 ) 2 -1 - OmodAT o (a r/2 -\\a rl2 + l) = OmodAT 
This means: 

3heK:(a r/2 -\\a rl2 +l)=hN 

So, unless ( a r/2 -l ) =0modN or ( a r/2 +l ) =0modN, namely a r/2 
s±lmodi\f, at least one of a r/2 +l or a r/2 -l must have a 
non-trivial factor in common with N. It may be found by 
calculation: 

gcd(a rn -IN) gcd{a rt2 +1,N). 

[00025] Using this reduction, the true question 
becomes: "What is the period of fl" Since the period of 
this function is less than N, it may be restricted to 
the interval [0, 1, N-l] . Every input value is 

coded as a binary string. A number of bits 73= [log N] 
(eventually [log N]+l) is needed to code all the N 
possible input values . 

[00026] Therefore, Shor's problem is translated into 
the following standard quantum problem: 



Input 


f:{0,l} n ->{0,l} n with period r 


Problem 


Find r 



t 
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ENCODER: 

[00027] First a simple example will be dealt with, 
then conclusions will be generalized. 

A. Introductory example : 
[00028] Consider the case: 

N = 4 => H = 2; a = 3 

Then, map table f is: 



TABLE 1 





f (X0,Xl) 


00 


01 


01 


11 


10 


01 


11 


11 



The period of this function is r=2 . 
STEP 1: 

[00029] Function f is encoded into the injective 
function F built using eq. (2) . Therefore, the map 
table of F is as follows: 



TABLE 2 





F(Xo/ • • / x n-l / Yo, • • , y B -i) 


0000 


0001 


0100 


0111 


1000 


iooi ! 


1100 


1111 


0001 


0000 
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0101 


0110 


1001 


1000 


1101 


1110 


0010 


0011 


0110 


0101 


1010 


1011 


1110 


1101 


0011 


0010 


0111 


0100 


1011 


1010 


1111 


1100 



STEP 2: 

[00030] The function F is encoded into the map table 
of the operator U F i 



TABLE 3 



I x 0 . . Jtn-x y 0 . . y n -i> 


u F {x 0 . . Jt n -i y Q . . y B -i> 


I 0000> 


I 0001> 


I 0100> 


I 0111> 


I 1000> 


I 1001> 


I 1100> 


I 1111> 


I 0001> 


I 0000> 


I 0101> 


I 0110> 


I 1001> 


I 1000> 


I 1101> 


1 1110> 


I 0010> 


I 0011> 


|0110> 


I 0101> 


|1010> 


I 1011> 


I 1110> 


I 1101> 


I 0011> 


I 0010> 


|0111> 


I 0100> 



- 14 - 



I 1011> 


I 1010> 


1 1111> 


I 1100> 



STEP 3: 

[00031] The matrix corresponding to U F is obtained by 
using the rule: 

[U F \=\<*U F \j)=\i) 

or in other words by observing that the first two 
vectors in the input tensor product are left unchanged, 
whereas the operator acting on the last two is chosen 
inside the set { I® I, J®C, C®J, C®C} wherein I is the 
identity matrix and C is the complement matrix, 
depending on the values of the first two vectors: 



TABLE 4 





I 00> 


I 01> 


I 10> 


lll> 


I 00> 


I®C 


0 


0 


0 


I 01> 


0 


as>c 


0 


0 


I 10> 


0 


0 


I®C 


0 


1 11> 


0 


0 


0 





This matrix preserves the first two vectors and it 
preserves the third vector, flipping the fourth vector 
when the second vector is |0>; and flipping the third 
and fourth vectors when the second vector is |1>. 
[00032] It is worth noting that the block matrix in 
cell (i, i) is identical to the block matrix in cell 
( (i+r) modN, (i+r)modN) where i is the binary label of 
the vector marking the matrix row and column of the 
cell. 
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B . Case with n=2 : 

[00033] In general, if n=2, a different value will be 
taken and so a different period r will be obtained, and 
the operator still maps the first n vectors into 
themselves but the block matrix pattern on the main 
diagonal changes. 

[00034] The matrix U F has the following form: 

TABLE 5 





|00> 


I 01> 


|10> 


|11> 


I 00> 


Moo 


0 


0 


0 


I 01> 


0 


Moi 


0 


0 


I 10> 


0 


0 


Mio 


0 


lll> 


0 


0 


0 


Mn 




C®J, 


C®C} 


and M± 


—Mj <=> 



( j= (i + r)modN) ) . 
C. General case: 

[00035] Through a similar reasoning the following 

general form for the matrix U F when n>0 may be proposed: 



TABLE 6 





I 0. . 0> 


10.. 1> ... 


I 1. . 1> 


10. 


.0> 


Mo., o 


0 


0 


10. 


. 1> 


0 


M 0 .. i 


0 


11. 


. 1> 


0 


0 0 


Mi., i 



where M±= P 2 <8>..<8>P n , P k e{I, C} , k=l, . . , n and M ± = Mj o 
( (j=i) OR (j= (i+r) modAO ) . The column labels are base 
vectors of dimension n. 



QUANTUM BLOCK: 

[00036] The Shor' s quantum gate may be described with 
the quantum circuit of FIGURE 6. Shor' s quantum gate 
shown in FIGURE 7 is very similar to Simon's quantum 
gate shown in FIGURE 8, unless for the last operator. 

[00037] In Simon's algorithm the operator n H is 
applied to the first n vectors exiting from U F . This 
operator of the Simon's algorithm is responsible for 
the deletion of some of the cells in the first column 
of the final gate and this produces a special 
superposition of base vectors as output. By measuring 
this superposition it is possible to solve the Simon's 
problem. 

[00038] In Shor's algorithm the interference operator 
is not n H, in fact the main diagonal pattern of U F is 
different, and therefore a different interference 
operator is needed to extract the information. This 
operator is represented by the matrix QFT nr called 
Quantum Fourier Transform of order n. This operator is 
non-classical because it maps a base vector into a 
complex linear combination of base vectors. In general, 
a base vector | i> is mapped into the linear combination 
&iyx+ . .+a 2 ny 2 n where a± and a±+\ have the same absolute 
value \/2 nn but they are phase shifted i-(27i/2 n ) 
starting with tti=l/2 n/2 . The operator is defined as 
follows : 
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TABLE 7 



QFT n 


^=0 


0=2n/2 a 


- <t>=(2 D -l)27t/2 n 




|0. . 0> 


I 0. . 1> 


... |1.. 1> 


10. .o> 
1 0. . 1> 


l/2 n " 
l/2 n/2 


l/2 n/2 

l/2 n/2 e J2,t/2n 


... l/2 n " 

l/2 n/2 e J <2n _1) 2K/2l> 


1 1. . 1> 


1/2 n/2 


l/2 n/2 e J (2n _1) 2 " /2n 


l/2 n/2 e J <2 " ~ 1>2 2,1/2/1 



where J is the imaginary unit. By using the 
transformation rules shown in FIGURES 5a to 5f to the 
circuit of FIGURE 6, the quantum gate of FIGURE 7 is 
obtained. 

[00039] A discussion of the form of these gates for a 
few particular cases will follow and the observations 
will then be generalized. 

A. Introductory example: 

[00040] If n=2, the quantum gate has the following 
form: 

G=(QFT 2 ® 2 I) -U F • ( 2 H® 2 I) 

This gate is now calculated for the first considered 
example : 



TABLE 8 





I 00> 


I 01> 


I 10> 


Ill> 


I 00> 


z I/2 


z I/2 


z I/2 


2 I/2 


I 01> 


2 I/2 


- 2 I/2 


2 I/2 


- 2 I/2 


I 10> 


2 I/2 


2 I/2 


- 2 I/2 


- 2 I/2 


lll> 


2 I/2 


- 2 I/2 


- 2 I/2 


2 I/2 
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The matrix U F has been already presented in TABLE 4, 
therefore 



TABLE 9 



U r ( 2 H ® 2 I) 


1 00> 


I 01> 


1 10> 


I 11> 


1 00> 


J®C/2 


I®C/2 


I®C/2 


I®C/2 


I 01> 


C®C/2 


-C0C/2 


G8)C/2 


-C®C/2 


I 10> 


J0C/2 


I0C/2 


-!<8>C/2 


-I®C /2 


lll> 


C®C/2 


-D8>C/2 


-C0C/2 


C<8»C/2 



= 2, QFT 2 


is as 


follows : 










TABLE 


10 






&=0 


0=7t/2 




^3ti/2 




I 00> 


I 01> 


| 10> 


Ill> 


I oo> 


1/2 


1/2 


1/2 


1/2 


I 01> 


1/2 


J/2 


-1/2 


-J/2 


I 10> 


1/2 


-1/2 


1/2 


-1/2 


lll> 


1/2 


-J/2 


-1/2 


J/2 



TABLE 11 



QFT 2 ® 2 I 


|00> 


I 01> 


I 10> 


Ul> 


I 00> 


z I/2 


*J/2 


z I/2 


*J/2 


1 01> 


2 I/2 


J 2 J/2 


- 2 I/2 


-J 2 J/2 


I 10> 


2 I/2 


- 2 J/2 


2 I/2 


- 2 I/2 


lll> 


2 I/2 


-J 2 I/2 


- 2 I/2 


J 2 J/2 



The table defining the quantum gate G is calculated as 
follows : 
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TABLE 


12 




G 


I 00> 


I 01> 


I 10> 


Ul> 


I 00> 


(I<8>C+C®C) /2 


(I<8>C-C®C) /2 


0 


0 


I 01> 


0 


0 


( J®C+JC®C) /2 


(I®C-JC®C) /2 


I 10> 


(I®C-C®C) /2 


{I&C+C&C) /2 


0 


0 


1 11> 


0 


0 


( J®C- JC0C) /2 


( J®C+JCt8>C) /2 



By applying the operator G to the vector | 0000> the 
following is obtained: 

G\ 0000) = | oo)- (/ ® c + c ® c) 00) +|io>- (/ ® c - c ® 00) . 

[00041] If a measurement of this vector is made and 
the first two vectors of dimension 2 are encoded back 
into their binary labels, the possible results are: 

00 with probability 0.5 
10 with probability 0.5 

The distance between these values is d-[|10- 
00 | ] io= [10] io=2, where [s]i 0 is the decimal 
representation of the binary string s. It should be 
observed that 2tf/r=4/2=2, therefore d=N/r. If r is 
unknown, it may be calculated as: 

r-N/d. 

B. Case with n=2 , r=2 : 

[00042] As shown above, when n=2, the quantum gate 
has the following form: 



G= ( QFT 2 -U F -{ 2 H® 2 I) 
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by using the matrices calculated in the introductory 
example and recalling U F given by TABLE 5. 



TABLE 13 



U r ( 2 ff <8> 2 J) 


I 00> 


I 01> 


I 10> 


|11> 


1 00> 


Moo/ 2 


Moo/ 2 


M 00 / 2 


Mbo/2 


I 01> 


Moi/2 


-Mbi/2 


Moi/2 


-Moi/2 


I 10> 


Mio/2 


Mio/2 


-M 10 /2 


-M 10 /2 


1 11> 


Mn/2 


-Mu/2 


-Mn/2 


Mn/2 



[00043] By recalling the expression of the 
interference operator QFT 2 <8> 2 I shown in TABLE 11, the 
following generalized form of G is obtained: 







TABLE 


14 




G 


I 00> 


I 01> 


I 10> 


Hl> 


|00> 


(Wbo+Woi+Mio+ATu) /4 


(Moo-^oi+^io- 


(Moo+^oi-^io- 


(Moo-Mox-Mio+Mn) /4 






Mn)/4 


Mn)/4 




I 01> 


(M 00 +JM 01 -M 10 - 


(Moo-JMqi- 


(M 0 o+JMoi+M 10 +J 


(Moo-J^oi+^io- 




JMn) /4 


Afto+JAfu) /4 


Mn)/4 


JM n ) /4 


I 10> 


(Wbo-Wbi+Wio-Wn) /4 


(Afco+Woi+^io+Wu 


) (Moq-M 01 - 


(Mno+Moi-Mio-Mn) /4 






/4 


Wio+Mn) /4 




lll> 


(Mqo-JMoi- 


(i%o+JM 01 -M 10 - 


(Woo-JW 0 i+M 10 - 


(Moo+JWoi+^io+JWn) 




M 10 +JMn) /4 


JMn) /4 


JM n ) /4 


/4 



If r=2, like in our introductory example, then M 0 o=Mi 0 
9tMoi=Mn. This means: 







TABLE 
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G 


I 00> 


I 01> 


I 10> 


Ul> 


I 00> 


(Mo 0 +M Q1 ) /2 


(M 00 -M Q1 )/2 


0 


0 


I 01> 


0 


0 


(Moo+JM ol ) /2 


(M 00 -JM 0 i) /2 


I 10> 


{Moo-M 01 )/2 


(Mo 0 +M 01 )/2 


0 


0 


lll> 


0 


0 


(Mqo-JMoi) /2 


{M 00 +JM 01 ) /2 



Consider the application of G to vector |0000>: 
G| 0000) = 1 00) 1 (Moo + ^o. ) 00) + 1 1 0) I (Moo " ^o, J 00) . 

[00044] If a measurement is done on this vector and 
the first two vectors of dimension 2 are encoded back 
into their binary labels, then the possible results 
are : 

00 with probability 0.5 
10 with probability 0.5 

These are the same results that were obtained for our 
introductory example and the same conclusions hold. 

C. General case: 

[00045] As already shown, for a general case, the 
operator U F is defined as in TABLE 6. The quantum gate 
will now be calculated for a general situation: 
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TABLE 16 



°H <8> n I 


|0. .0> . 




.. |1.. 1> 


|0. .0> 
I 0. . 1> 


" J/2 n/2 
n J/2 n/2 


" J/2 n/2 
.. (-1) «o..D • J 

( n I/2 n/2 ) 


.. n J/2 n/2 

_ n J/2 n/2 


|i> 


n J/2 n/2 


•• ( n J/2 n/2 ) 


» (-1) ( n J/2 n/2 ) 


11. .1> 


nj /2 n/2 


•• (-1) J ( n J/2 n/2 ) • 


•- (-1) <1 -- 1) ' ( n J/2 n/2 ) 



TABLE 17 



U F ■ 




|0.. 0> 


.. Ij> 


... | 1 . . 1> 


|0.. 


0> 


M 0 .. 0 /2 n/z . 


M 0 ..o/2 n/z 


... M 0 ..o/2 n/2 


1 i> 




Mi/2 n/2 


■■ Mi/2 n/2 


... (-1) 1 • <1 - 1) Mj2 nn 


11. . 


1> 


ML.i/2" 72 . 


.. (-1) ti-.u J 
Mi..i/2 n/2 


( -1 ) I 1 -* 1 ' (1 - - 1 ' 
M 1 .. 1 /2 n/2 



Observe that ; 



1 /ML Mio- 2 * 



where [i]iO and [J]l0 are the decimal representations 
of the binary strings i and j. Therefore: 
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TABLE 18 



QFT n <8> n I 


I 0. . 0> .. 


■ \j> 


. |1. .1> 




n T /^n/Z 
± / Z 


-L / Z. 


n T / <yn/2 
1/ ^ 


\i> 


n I/2 n/2 .. 


I1 J/2 I5/2 e J[i] io-^3 1 o 


n I/2 n/2 e J[i] io (2n ~ 






2Jt/2" 


1) 27t/2" 


11. .1> 


n I/2 n/2 ... 


n J/2 n/2 e J(2n " 


n I/2 n/2 e J(2 " ~ 1)2 






l).[j] 10 27C/2" 


27C/2" 



The quantum gate G has the following form: 



TABLE 19 



G 


10.. 0> 


|0.. 


0> 




e J* • 0 - [*] 10 /2«-l) ^ 


Ii> 




l/2 n Sjt e {o / l} n 




11. . 


1> 


l/2 n 2 A;e{ o, i} n 





Consider the term: 

Since Mi- Px®..®P n , P*e{I, C) , Jc=l,..,n and M± = Mj o 
( (j = i) OR (j= (i+r) modAT) ) this term may be written as: 

l/2 n E h6R [e Jn ' ^lO^" 1 _|_ e J^ • [i]io- ([A3i 0 +lr)/2«-l + + e Jjt • 

[i)lO- (lh] 10 +{l k -l)r)/2n-l^ M 



or: 



- 24 - 

l/2 n S heR (-1) ^lOmio/S"' 1 [ 0r[i] 10 /2"-l + lr[i] 10 /2«-l + 

+ C2 h -l)r[ili 0 /2«-l ]Jlft 

where R={ 0 . . 0, 0 . . 1, .., [r-l] 2 }. Suppose that N is a 
multiple of r, then l h =2 n /r=I for every h. Therefore, 
the previous term can be transformed into: 

l/2 n i: heR (-1) ^ioU]io/2"-i [( _ 1) 2-0-[i] 10 /J + ( _ 1)2 .i.[i] 10 /i + 
. . + (-l) 2 - (i - 1) ' ti] ^] Mh 

and finally: 

l/2 n S /3Gi? (-1) ^lOUJlO/Z"- 1 j- e J-0-(2n [i]i 0 /D + e J-l'(27C [illoAU + 

. . + e J ' (i - 1) (271 [i] io /J) ]M h 

The term: 

e J-0-(27i [i] 10 /D + e J-l-(27i [i]i 0 /D + + e J-(l-l)-(27i [i] 10 /l) 

is the summation of the 1 roots of order I of the 
unity, unless i is a multiple of 1. The summation of 
the roots of a given order of the unity is always null. 
[00046] Therefore, in the first column of G, only 
those cells whose row label is | i> with i multiple of 1 
are non-null. This means that by applying G to vector 
|0..0>, measuring the result and encoding back into 
their binary values the first n base vectors of 
dimension 2 in the resulting tensor product, only 
strings i, such that i=m* 1 for some integer m are 
obtained. This means: i=0modl. 



DECODER: 

[00047] As for Simon's algorithm, the quantum block 
is repeated several times to build a collection of 
vectors | i> such that i=0modl. By putting these 
equations in a system and solving it, the value of 1 is 
obtained. Since l=2 n /r, r=2 n /l is calculated. 
[00048] The number of vectors necessary for 
calculating r depends on the technique used for solving 
the system of equations. In general, it is necessary to 
repeat the quantum block for a number of times that 
increases according to a polynomial rule with n. 
[00049] If 2 n is not a multiple of r, then l h =[2 n /r], 
for some values of h, and l h = [2 n /r] +1, for some other 
values of h. The term 



e J-0 (27i [i) 1Q /l h ) + e J-K2w ti] 10 /2 h ) + ^ + e J ' Uh _1) {2n [±] io / Z h) 

is not exactly 0 when i is not a multiple of l h , 
although it approximates 0. Therefore, all possible 
strings may be found as a result of measurement, but 
strings i that do not represent a multiple of 2 n /r are 
less likely to be found. To decrease this probability 
(and increase the probability of 2Vr-multiples ) , 2n 
input bits are used for encoding f. This means that 
more roots of the unity are involved and thus a better 
approximation is reached. 

[00050] According to classic approaches, it is 
evident that the number of qubits (quantum bits) of a 
quantum algorithm may be a critical parameter that 
noticeably limits the calculation speed. In fact, by 
referring to the scheme of FIGURE 6, it may be noticed 
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that by adding only one qubit, the size of matrices 
with respect to the previous configuration is doubled 
and the number of multiplications to be performed grows 
exponentially. This fact limits the possibility of 
practically using the Shor's and Simon's algorithms 
when the number n of qubits is relatively large. 

Summary of the Invention 
[00051] In view of the foregoing background, an 
object of the present invention is to provide a faster 
method for performing Simon's or Shor's quantum 
algorithms. 

[00052] Differently from known methods, and according 
to the method of the present invention, the 
superposition matrix operator is not generated and row- 
columns products are not carried out because only the 
indices of the non-null components of vectors generated 
by the superposition operation are calculated. In doing 
so, only vectors of 2 n components need to be calculated 
and stored, resulting in a significant savings in terms 
of computational complexity, time and memory space. 
[00053] More precisely, an object of the invention is 
to provide a method for performing a Simon's or Shor's 
quantum algorithm over a certain function f(x) encoded 
with a certain number n of qubits, that comprises 
carrying out a superposition operation over a set of 
input vectors and generating a superposition vector; 
carrying out an entanglement operation and generating a 
corresponding entanglement vector; and carrying out an 
interference operation and generating a corresponding 
output vector. 

[00054] The method of the invention carries out the 
superposition operation in a comparably very fast 



manner because it generates the superposition vector by 
identifying only the non-null components thereof by 
calculating, as a function of the number n of qubits, 
the value l/2 w/2 of the non-null components of the 
superposition vector, and by calculating the indices of 
these components according to an arithmetic succession, 
the seed of which is 1 and the common difference is 2 n . 
According to a preferred embodiment, similar operations 
are performed also for simplifying the entanglement 
operation . 

[00055] The method of the invention may be 
implemented in a corresponding quantum gate that 
comprises a superposition subsystem carrying out a 
superposition operation according to a Simon's or 
Shor' s quantum algorithm over a set of input vectors, 
and outputs a superposition vector. An entanglement 
subsystem processes components of the superposition 
vector, and outputs a corresponding entanglement 
vector. An interference subsystem processes components 
of the entanglement vector, and generates a 
corresponding output vector. 

[00056] A characterizing feature of the quantum gate 
of the invention is based upon the superposition 
subsystem comprising a circuit generating a first bit 
string representing the value \/2 n/2 of the non-null 
components of the superposition vector and other 2 n bit- 
strings each representing a respective index of the 2 n 
non-null components of the superposition vector. A 
memory buffer stores the strings representing the value 
l/2 n/2 and the indices. 
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Brief Description of -the Drawings 
[00057] The various aspects and advantages of the 
invention will become even more evident through a 
detailed description referring to the attached 
drawings , wherein : 

[00058] FIGURE 1 is a block diagram of quantum 
algorithms according to the prior art; 
[00059] FIGURE 2 is a block diagram of an encoder 
according to the prior art; 

[00060] FIGURE 3 is a general structure of the 
Quantum Block as show in FIGURE 1; 

[00061] FIGURE 4 is a circuit for a Deutsch- Jozsa' s 
quantum gate according to the prior art; 

[00062] FIGURE 5a shows an example of tensor product 
transformation according to the prior art; 

[00063] FIGURE 5b shows an example of dot product 
transformation according to the prior art; 

[00064] FIGURE 5c shows the identity transformation 
according to the prior art; 

[00065] FIGURE 5d shows an example of a propagation 
rule according to the prior art; 

[00066] FIGURE 5e shows an example of an iteration 
rule according to the prior art; 

[00067] FIGURE 5f explains the input/output tensor 
rule according to the prior art; 

[00068] FIGURE 6 illustrates the Shor's quantum 
algorithm according to the prior art; 

[00069] FIGURE 7 illustrates the Shor's quantum gate 
according to the present invention; and 

[00070] FIGURE 8 illustrates the Simon's quantum gate 
according to the present invention. 



- 29 - 

Detailed Description of the Preferred Embodiments 
[00071] Both for the Shor' s algorithm as well as for 
the Simon' s algorithm, the superposition block is 
n H<8>"I . This implies that the first n qubits of the 
input vector are to be multiplied for n H and the second 
n qubits are to be multiplied for V . 

[00072] To better illustrate how, according to the 
invention, the superposition operation may be greatly 
simplified, consider the following example with n=3. 
The first 3 qubits of the vector P generated by the 
superposition operator are given by: 

H|0)®H|0)<8>H|0) 

Neglecting the constant l/2 3/2 (n=3) , this tensor 
product is: 



1 




1 




1 












1 




1 




1 



= [l 1 1 1 1 1 1 if 



In general the vector P obtained with the superposition 
operation is 



Pi 



wherein p t = l/2 n/2 . 

[00073] For the considered example with n=3, this 
vector P is 



P = ^72 -[ 1 1 1 1 1 1 1 if ®[l 0 0 0 0 0 0 Of 
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In the general case (any value of n) the components p± 
of the vector P obtained with the superposition 
operation according to the Shor' s or Simon's algorithm 
are : 



Pi = 



1 



2«/2 
0 



if f = 1 + 2-0-1) 



(6) 



otherwise 



wherein j = 1...2", i = 1...2 2- . 

[00074] The components of the superposition vector 
may assume only two values, only 2 n of which are non- 
null and must be stored. An advantage with respect to 
the known methods is that it is no longer necessary to 

store the whole superposition operator n H® n I , which has 
2 2 "x2 2n components, and performing row-columns products, 
but it is possible instead to store only the positions 
of the 2 n non-null components of the superposition 
vector. The non-null value of these components is l/2 n/2 
and may be calculated immediately by knowing the number 
n of qubits. 

[00075] According to the method of the invention, the 
superposition vector P is not calculated carrying out 
2 2n row-column products, as in the known methods, but is 
determined simply by calculating the positions of the 2 n 
non-null components, the value of which is l/2" /2 . These 
indices may be easily calculated, for instance in the 
form of bit strings with a complex programmable logic 
device (CPLD) , by simply providing the number n of 
qubits. According to a preferred embodiment of the 
invention the entanglement operation is also made less 
complex from a computational point of view than in the 
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known methods. 

[00076] It has been noticed that in all quantum 
algorithms, the entanglement matrix U F is a diagonal 
block matrix, the structure of which is strictly tied 
to the binary representation of the function f . The 
diagonal matrix blocks are chosen from the set formed 
by the identity matrix I, the complement matrix C and 
matrices obtained as tensor products thereof. 
[00077] For instance, for the Shor's algorithm, with 
13=2, the diagonal matrix blocks of the matrix U F are 
chosen from the set composed of 

7<8>7, 7®C, C®7, C®C 

each having a size 2 2 x2 2 . These matrix blocks may be 
immediately obtained from TABLE 1 noticing that, if the 
value 00 corresponds to a certain vector (x 0 , xi) , then 
the matrix block on the diagonal of U F in correspondence 
of the row (xqjXj) is 7®7. Similarly, when f{x 0 , Xi) is 
equal to 01, 10 or 11, the matrix block on the diagonal 
of U F in correspondence of the row |x 0 ,x,) is 

respectively equal to 7<8>C, C®7, C®C. This rule is 
resumed in the following table: 



TABLE 20 



F(x 0 , Xx) = 00 


F(x 0 , xi) = 01 


f(xo, xi) = 10 


f{X 0 , Xi) = 11 


I® I 


I®C 


C<8>/ 





In general, when this bit-string is known 

f(x 0 , x n _i) = (z 0 , z m -i) 
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it is possible to recognize immediately that the matrix 
block on the main diagonal (up-left to down-right) of U F 



This straightforward rule may be easily verified and it 
holds for all quantum algorithms. It allows a quick 
calculation of the non-null 2 n matrix blocks of U Ff each 
having 2" x2 n components. 

[00078] By knowing the non-null matrix blocks of the 
matrix U F , it is possible to quickly calculate the 
vector A obtained with the entanglement operation, 
recalling that only a component per each row and per 
each column of the matrix U F is non-null. According to a 
preferred embodiment of the method of the invention it 
is possible to calculate immediately the components a k 
of the entanglement vector A without calculating any 
product . 

[00079] In more detail, it has been observed that 
only the first row of each 2 rt x2 rt matrix block of the 
entanglement operator U F gives a non-null result, 
because the non-null components of the superposition 
vector P of Shor's and Simon's algorithms are given by 
eq. (6) . As a consequence, it is even possible to 
calculate the components a k of the entanglement vector A 
by directly using the following formula 



in correspondence of the row |jt 0 , *„_,) is: 



(z 0 .C + (l-z 0 )./)®.-.®(z_ 1 .C + 



m-l 



l 



if k = f(j) + l + 2"(j - 1) 



2 



n/2 



(7) 



0 



otherwise 
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wherein j = 1...2 m , k = \...2 2n . 

[00080] The result is a vector the components of 
which are null or assume a same non-null value that 
depends only on the number n of qubits. As for the 
superposition vector, also in this case there are only 
2 n non-null components having the same value, thus the 
entanglement vector may be determined by the indices of 
the 2 n non-null components. 

[00081] Therefore, the entanglement operation, as 
well as the superposition operation, may be carried out 
with a circuit that generates bit-strings that 
represent these indices and a memory buffer in which to 
store these strings. It is much more difficult to 
perform the interference operation of the Shor' s 
algorithm. In fact, differently from the entanglement 
operation, the vector components are not composed 
exclusively by two values. Moreover the presence of 
tensor products, the number of which grows rapidly with 
n, forms a critical computational problem. 

[00082] To simplify the input-output relations, 
certain particular properties of the matrix QFT n ® n I 
have been considered. Differently from other quantum 
algorithms, the interference operation in the Shor' s 
algorithm is performed through a quantum Fourier 
transformation QFT. As all quantum operators, the QFT 
operator is a unary operator acting on complex vectors 
of the Hilbert space. It transforms each input vector 
in a superposition of base vectors of the same 
amplitude, but with a phase shift. 

[00083] The interference matrix QFT n ® n 7 has only a 

few non-null components. It has 2 n -(2 n -l) zeroes in each 
column. As a consequence, it is not necessary to 
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perform all multiplications because many of them give a 
null result. 

[00084] Since b h is the components of the vector B 
generated with the interference operation, the real 
part and the imaginary part of b h are given by the 
following equations : 



since int [ . ] is the function that generates the integer 
part of its argument and since h=1..2 2n . 
[00085] Therefore, according to the improved method 
of the invention, each component is calculated simply 
by performing a summation of at most 2 n cosine (or sine) 
functions and multiplying this summation for l/2 n/2 , 
because the non-null components of the entanglement 
vector A are equal to l/2 n/2 . 

[00086] The improvement with respect to the known 
method is evident, because they contemplate the step of 
calculating the real and imaginary parts of the 
components of the output vector by performing a 
summation of 2 2n products, thus with a significantly 
greater computational complexity. 




